Re:Crypto Zealots
by annabellish on Friday March 09, 2018 @06:20AM
(#16551040)
The main difference in my experience is that LE's short certificate expiry dates force you to automate certificate renewal, while traditional certificates usually don't even offer automation and so require you to take time to explicitly renew them.
My problem is with the crusade to make everything HTTPS - normal HTTP involved no ongoing setup, and didn't put the ongoing functionality of your website in someone else's hands. As I've said above, LetsEncrypt is sponsored by corporations and could disappear tomorrow.
Re:Crypto Zealots
by AluminiumPoint on Friday March 09, 2018 @06:40AM
(#16551111)
Do you live in some parallel universe where we do not have mass surveillance, nation states or internet providers modifying traffic or unencrypted wifi at coffee shops?
Your attitude is irresponsible. HTTPS is not a luxury, it is a requirement.
Let's Encrypt is currently sponsored by 53 different corporations and organizations, including Google, Facebook and Cisco. I'm not seeing it disappearing anytime soon.
My HTTPS web server requires no on-going setup. And the on-going functionality is in a lot of people's hands, since I don't host the server in my own house with my own fixed Internet connection.
Also, sometimes doing a bit of server work is rewarding on its own.